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DETAILED ACTION 

1. This action is in response to the amendment filed on 05/23/2007. 

2. Claims 1, 3, 9, 11-12 and 15-17 have amended. Claims 2, 13 and 18 have 
canceled. Claims 1, 3-12, 14-17 and 19-27 are pending for consideration. 

Continued Examination Under 37 CFR 1.114 

3. A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1.17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on 
05/23/2007 has been entered. 


Response to Arguments 

4. Applicant's arguments with respect to claims 1, 3-12, 14-17 and 19-27 have been 
considered but are moot in view of the new ground(s) of rejection. 


Double Patenting 

5. The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timewise extension of the “right to exclude” granted by a patent 
and to prevent possible harassment by multiple assignees. A nonstatutory 
obviousness-type double patenting rejection is appropriate where the conflicting claims 
are not identical, but at least one examined application claim is not patentably distinct 
from the reference claim(s) because the examined application claim is either anticipated 
by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 
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F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 
USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 
1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 
F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 
USPQ 644 (CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1.321(c) or 1.321(d) 
may be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent either is shown to 
be commonly owned with this application, or claims an invention made as a result of 
activities undertaken within the scope of a joint research agreement. 

Effective January 1, 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply with 
37 CFR 3.73(b). 

6. Claims 1, 9, 12, 15, 16-17 and 25 are rejected on the ground of nonstatutory 
obviousness-type double patenting as being unpatentable over claims 1, 7-8 and 18 of 
U.S. Patent No. 7043635 (hereinafter Keech) in view of Marvit et al (US 6625734) 
(hereinafter Marvit). Keech discloses verification communication between the two 
computer, wherein the identity of a first user is verified and characters selected from a 
first array and second array form a volatile identification code, which is a third array. 
Keech does not disclose encryption method. Marvit discloses encryption method 
(Marvit: see figures 1 and 8). Therefore, it would have been obvious to one ordinary 
skill in the art at the time the invention was made to modify the procedure in Keech by 
including encryption method as taught by Marvit, because such modification would 
provide the procedure in Keech with a comprehensive approach for controlling and 
tracking access to data disseminated on communications networks (Marvit: column 2 
lines 3-5). 


Claim Comparison Table 


Instant Application 09/994919 

Patent Application 7043635 

Claims 1. 12.16 and 17. A method of 

Claims 1. 7. 8 and 18. A coded 
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transferring a data file having a file name identification system, the system 
from a first computer operated by a first comprising an electronic computer, a 

user to a second computer operated by a specific electronic communications device 

second user, wherein the method is that is operable to be in communication 

performed under control of a third with the electronic computer, and at least 

computer, comprising: a) permitting the one electronic communications device that 
first user to select, on the first computer, a is operable to be in communication with 
data file which is to be transferred; b) the electronic computer, wherein the 

establishing a communications link electronic computer includes data relating 

between the first computer and the third to the specific electronic communications 
computer; c) verifying an identity of the device, including a permanent 

first user to the third computer by way of identification code, a mask code and an 

verification communications between the identification code enabling electronic 
first and third computers, wherein the communication between the electronic 
identity of the first user is verified by way computer and the specific electronic 
of: generating, in the third computer, a communications device, and wherein the 
pseudo-random security string; permanent identification code is input to 

transmitting the pseudo-random security the at least one electronic communications 
string from the third computer to the first device and transmitted to the electronic 
computer; causing the first computer to computer, the electronic computer 
display the pseudo-random security string generates a pseudo-random string and 
to the first user; permitting the first transmits this to the specific electronic 

computer to receive from the first user a communications device, the mask code 
volatile identification code, wherein the is applied to the pseudo-random string 
first user volatile identification code is so as to generate a volatile 
created by the user applying a first user identification code in accordance with 
mask code to the pseudo-random predetermined rules, the volatile 

security string; transmitting the first user identification code is transmitted back to 

volatile identification code from the first the electronic computer by the specific 

computer to the third computer and electronic communications device or the at 

causing the third computer to compare least one electronic communications 
the first user volatile identification code device, the electronic computer checks 
with a first check volatile identification the volatile identification code 
code obtained by applying the first user transmitted thereto against a volatile 
mask code to the pseudo-random identification code obtained by 

security string in the third computer, applying the mask code to the pseudo- 
wherein the identity of the first user is random string in accordance with the 

verified when the user volatile predetermined rules, and in which a 

identification code and the first check positive identification is made when the 
volatile identification codes are found volatile identification codes are found 
to match each other. to match by the electronic computer, 

wherein the pseudo-random string 

Claims 9.15 and 25 . wherein: i) the comprises a first array of characters; each 

pseudo- random string comprises a first character having a given numerical 
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linear array of characters, each character 
having a given numerical position in 
the first array (first, second, third etc.); ii) 
the mask code comprises a second linear 
array of numbers, each number having 
a given numerical position in the 
second array (first, second, third etc.); 
and iii) the volatile identification code is 
generated by applying the mask code 
to the pseudo-random string so as 
sequentially to select numerical 
positions in the first array on the basis 
of the numbers in the second array, 
taken in positional order, and to return 
the characters thereby selected from the 
first array in sequence so as to form a third 
linear array, this third linear array 
forming the volatile identification code. 


position in the first array (first, second, 
third etc.), and wherein the mask code 
comprises a second array of numbers, 
each number having a given numerical 
position in the second array (first, 
second, third etc.), the predetermined 
rules for applying the mask code to the 
pseudo-random string so as to generate 
the volatile identification code being 
sequentially to select numerical 
positions in the first array on the basis 
of the numbers in the second array, 
taken in positional order, and to return 
the characters thereby selected from the 
first array in sequence so as to form a third 
array, this third array forming the 
volatile identification code. 


Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

8. Claims 1, 3-7, 10-12, 16-17, 19-23 and 26-27 are rejected under 35 

U.S.C. 103(a) as being unpatentable over Ishikawa et al. (US 6343284) (hereinafter 
Ishikawa) in view of Marvit et al. (US Patent 6625734) (hereinafter Marvit). 

9. Regarding claim 1, Ishikawa discloses a) permitting the first user to select, on the 
first computer, a data file which is to be transferred (Ishikawa: see Summary section); b) 
establishing a communications link between the first computer and the third computer 
(Ishikawa: see figure 5); c) verifying an identity of the first user to the third computer by 
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way of verification communications between the first and third computers, wherein the 
identity of the first user is verified by way of: generating, in the third computer, a 
pseudo-random security string; transmitting the pseudo-random security string from the 
third computer to the first computer; causing the first computer to display the pseudo¬ 
random security string to the first user; permitting the first computer to receive from the 
first user a volatile identification code, wherein the first user volatile identification code is 
created by the user applying a first user mask code to the pseudo-random security 
string; transmitting the first user volatile identification code from the first computer to the 
third computer and causing the third computer to compare the first user volatile 
identification code with a first check volatile identification code obtained by applying the 
first user mask code to the pseudo-random security string in the third computer, wherein 
the identity of the first user is verified when the user volatile identification code and the 
first check volatile identification codes are found to match each other (Ishikawa: see 
Summary section and column 3 lines 3-20). 

However, Ishikawa does not specifically disclose in detail encrypting the data file 
from a first computer, transmitting the executable file containing the encrypted data file 
to the second computer from the first computer, establishing a communication link 
between the second computer and the third computer, verifying an identity of the 
second user, transmitting the file name of the data file from the second computer to the 
third computer with a request for unique key code, and transmitting the unique key code 
from the third computer to the second computer to decryption the data file. 
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Marvit discloses encrypting the data file from a first computer, transmitting the 
executable file containing the encrypted data file to the second computer from the first 
computer, establishing a communication link between the second computer and the 
third computer, verifying an identity of the second user, transmitting the file name of the 
data file from the second computer to the third computer with a request for unique key 
code, and transmitting the unique key code from the third computer to the second 
computer to decryption the data file (Marvit: see figure 1 and figure 8 and column 12 
line 54 through column 13 line 2). Therefore, it would have been obvious to one 
ordinary skill in the art at the time the invention was made to modify the procedure in 
Ishikawa by including encryption method as taught by Marvit, because such 
modification would provide the procedure in Ishikawa with a comprehensive approach 
for controlling and tracking access to data disseminated on communications networks 
(Marvit: column 2 lines 3-5). 

10. Regarding claim 3, Ishikawa discloses wherein the identity of the second user is 
verified in step viii) above by way of the second user applying a second user mask code 
to a first pseudo-random security string in the second computer so as to generate a 
second user volatile identification code, the second user transmitting the second user 
volatile identification code to the third computer and the third computer comparing the 
second user volatile identification code with a second check volatile identification code 
obtained by applying the second user mask code to a second pseudo-random string in 
the third computer, identity verification taking place when the second user volatile 
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identification code and the second check volatile identification codes are found to match 
each other (Ishikawa: see Summary section and column 3 lines 3-20). 

11. Regarding claim 4, Ishikawa discloses wherein the first pseudo-random security 
string and the second pseudo-random security string are the same (Ishikawa: see 
Summary section). 

12. Regarding claim 5, Ishikawa discloses wherein the pseudo-random string is 
generated by the third computer and transmitted firstly to the first computer and then 
from the first computer to the second computer (Ishikawa: see figure 1 and Summary 
section). 

13. Regarding claim 6, Ishikawa discloses wherein the pseudo-random string is 
generated by the third computer and transmitted firstly to the first computer and then 
from the third computer to the second computer (Ishikawa: see figure 1 and Summary 
section). 

14. Regarding to claim 7, Ishikawa discloses wherein the first pseudo-random 
security string and the second pseudo-random security string are different (Ishikawa: 
see figure 1 and Summary section). 

15. Regarding to claim 10, Ishikawa does not explicitly disclose in detail wherein the 
third computer maintains a record of transactions between the first, second and third 
computers so as to permit an audit trail to be established. Marvit discloses wherein the 
third computer maintains a record of transactions between the first, second and third 
computers so as to permit an audit trail to be established (Marvit: column 3 lines 11-56). 
Therefore, it would have been obvious to one ordinary skill in the art at the time the 
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invention was made to modify the procedure in Ishikawa by including the record of 
transactions between the first, second and third computers so as to permit an audit trail 
to be established as taught by Marvit, because such modification would provide the 
procedure in Ishikawa with a comprehensive approach for controlling and tracking 
access to data disseminated on communications networks (Marvit: column 2 lines 3-5).. 

16. Regarding to claim 11, Ishikawa does not explicitly disclose in detail wherein the 
first and/or second user volatile identification codes are stored as digital signatures in 
the third computer in combination with the associated pseudo-random security string. 
However, Marvit discloses wherein the first and/or second user volatile identification 
codes are stored as digital signatures in the third computer in combination with the 
associated pseudo-random security string (Marvit: column 17 lines 42-59). Therefore, it 
would have been obvious to one ordinary skill in the art at the time the invention was 
made to modify the procedure in Ishikawa by including user volatile identification codes 
are stored as digital signatures as taught by Marvit, because such modification would 
provide the procedure in Ishikawa with a comprehensive approach for controlling and 
tracking access to data disseminated on communications networks (Marvit: column 2 
lines 3-5). 

17. Regarding to claim 12, this claim has limitations that is similar to those of claim 1, 
thus it is rejected with the same rationale applied against claim 1 above. 

18. Regarding to claim 16, this claim has limitations that is similar to those of claim 1, 
thus it is rejected with the same rationale applied against claim 1 above. 
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19. Regarding to claim 17, this claim has limitations that is similar to those of claim 1, 
thus it is rejected with the same rationale applied against claim 1 above. 

20. Regarding to claim 19, the rejection of claim 18 is incorporated and further this 
claim has limitation that is similar to those of claim 3, thus it is rejected with the same 
rationale applied against claim 3 above. 

21. Regarding to claim 20, the rejection of claim 19 is incorporated and further this 
claim has limitation that is similar to those of claim 4, thus it is rejected with the same 
rationale applied against claim 4 above. 

22. Regarding to claim 21, the rejection of claim 20 is incorporated and further this 
claim has limitation that is similar to those of claim 5, thus it is rejected with the same 
rationale applied against claim 5 above. 

23. Regarding to claim 22, the rejection of claim 20 is incorporated and further this 
claim has limitation that is similar to those of claim 6, thus it is rejected with the same 
rationale applied against claim 6 above. 

24. Regarding to claim 23, the rejection of claim 19 is incorporated and further this 
claim has limitation that is similar to those of claim 7, thus it is rejected with the same 
rationale applied against claim 7 above. 

25. Regarding to claim 26, the rejection of claim 17 is incorporated and further this 
claim has limitation that is similar to those of claim 10, thus it is rejected with the same 
rationale applied against claim 10 above. 
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26. Regarding to claim 27, the rejection of claim 18 is incorporated and further this 
claim has limitation that is similar to those of claim 11, thus it is rejected with the same 
rationale applied against claim 11 above. 

27. Claims 8, 14 and 24 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Ishikawa in view of Marvit, and further in view of Wilfong U.S. Patent 5754652 
(hereinafter Wilfong). 

28. Regarding to claim 8, Ishikawa in view of Marvit does not explicitly disclose: 

i) said secure user code entry interface contains at least one active display for 
entry of at least one digit of said user mask code by the user; wherein said active 
display illuminates or highlights at least one display digit within said active display and 
said user enters said at least one digit of said user mask code by a response through an 
input device at a response time when said at least one display digit which corresponds 
with said at least one digit of said user mask code is illuminated or highlighted in said 
active display; and 

ii) a random run on time is added to said response time to extend said at least 
one active display. 

However, Wilfong teaches i) said secure user code entry interface contains at 
least one active display for entry of at least one digit of said user mask code by the 
user; wherein said active display illuminates or highlights at least one display digit within 
said active display and said user enters said at least one digit of said user mask code 
by a response through an input device at a response time when said at least one 
display digit which corresponds with said at least one digit of said user mask code is 
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illuminated or highlighted in said active display (Wilfong: column 2 lines 28-41); and ii) a 
random run on time is added to said response time to extend said at least one active 
display (Wilfong: column 2 lines 28-41). 

At the time of the invention, it would have been obvious to one ordinary skill in 
the art at the time the invention was made to modify the procedure in Ishikawa in view 
of Marvit by including active display illuminates or highlights at least one display digit 
within said active display as taught by Wilfong, because such modification would 
provide the procedure in Ishikawa in view of Marvit with verifying user’s identity by using 
an active display to capture the PIN number of user at a response time because the 
system prompts are made in such a way as not to be observable by bystanders 
(Wilfong: column 2 lines 32-34). 

29. Regarding to claim 14, the rejection of claim 12 is incorporated and further this 
claim has limitations that is similar to those of claim 8, thus it is rejected with the same 
rationale applied against claim 8 above. 

30. Regarding to claim 24, the rejection of claim 17 is incorporated and further this 
claim has limitations that is similar to those of claim 8, thus it is rejected with the same 
rationale applied against claim 8 above. 

31. Claims 9, 15 and 25 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Ishikawa in view of Marvit, and further in view of Covert (US 5177789) (hereinafter 
Covert). 

32. Regarding to claim 9, Ishikawa in view of Marvit does not explicitly disclose: 
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i) the pseudo-random string comprises a first linear array of characters, each 
character having a given numerical position in the first array (first, second, third etc.); 

ii) the mask code comprises a second linear array of numbers, each number 
having a given numerical position in the second array (first, second, third etc.); and 

iii) the volatile identification code is generated by applying the mask code to the 
pseudo-random string so as sequentially to select numerical positions in the first array 
on the basis of the numbers in the second array, taken in positional order, and to return 
the characters thereby selected from the first array in sequence so as to form a third 
linear array, this third linear array forming the volatile identification code. 

However, Covert teaches that limitation (Covert: see figures [5, 6] and column 5 
lines 15-46). Therefore, it would have been obvious to one of ordinary skill in the art at 
the time the invention to apply the teaching of Covert to the system of Ishikawa in view 
of Marvit because it would provide the benefit of using a computer security device and 
method in which both an encrypted password and an encrypted time-related code are 
required for access to a computer system, wherein the information is generated 
employing a small, easily carried, simple and inexpensive device (Covert: column 2 
lines 10-14). 

33. Regarding to claim 15, the rejection of claim 13 is incorporated and further this 
claim has limitation that is similar to those of claim 9, thus it is rejected with the same 
rationale applied against claim 9 above. 
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34. Regarding to claim 25, the rejection of claim 18 is incorporated and further this 
claim has limitation that is similar to those of claim 9, thus it is rejected with the same 
rationale applied against claim 9 above. 
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supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
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Trang Doan 
Examiner 
Art Unit 2131 

T.D. 


WS5SS8' 



